BMD  Agents:  An  Agent-Based  Framework  to  Model 
Ballistic  Missile  Defense  Strategies 

Duminda  Wijesekera1,  James  B.  Michael2’*,  Anil  Nerode3 

George  Mason  University, Fairfax,  Va.,  U.S.A.  dwijesek@gmu.edu 
2Naval  Postgraduate  School,  Monterey,  Calif,  U.S.A.  bmichael@nps.edu 
3 Cornell  University,  Ithaca,  N.Y.,  U.S.A.  anil@math.cornell.edu 

*  Corresponding  author 


Paper  no.  339 


Report  Documentation  Page 

Form  Approved 

OMB  No.  0704-0188 

Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 

VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  OMB  control  number. 

1.  REPORT  DATE 

JUN  2005 

2.  REPORT  TYPE 

3.  DATES  COVERED 

00-00-2005  to  00-00-2005 

4.  TITLE  AND  SUBTITLE 

BMD  Agents:  An  Agent-Based  Framework  to  Model  Ballistic  Missile 
Defense  Strategies 

5a.  CONTRACT  NUMBER 

5b.  GRANT  NUMBER 

5c.  PROGRAM  ELEMENT  NUMBER 

6.  AUTHOR(S) 

5d.  PROJECT  NUMBER 

5e.  TASK  NUMBER 

5f.  WORK  UNIT  NUMBER 

7.  PERFORMING  ORGANIZATION  NAME(S)  AND  ADDRESS(ES) 

George  Mason  University ,4400  University  Drive, Fairfax, VA, 22030 

8.  PERFORMING  ORGANIZATION 

REPORT  NUMBER 

9.  SPONSORING/MONITORING  AGENCY  NAME(S)  AND  ADDRESS (ES) 

10.  SPONSOR/MONITOR’S  ACRONYM(S) 

11.  SPONSOR/MONITOR’S  REPORT 
NUMBER(S) 

12.  DISTRIBUTION/AVAILABILITY  STATEMENT 

Approved  for  public  release;  distribution  unlimited 

13.  SUPPLEMENTARY  NOTES 

The  original  document  contains  color  images. 

14.  ABSTRACT 

15.  SUBJECT  TERMS 

16.  SECURITY  CLASSIFICATION  OF: 

17.  LIMITATION  OF 
ABSTRACT 

18.  NUMBER 
OF  PAGES 

37 

19a.  NAME  OF 
RESPONSIBLE  PERSON 

a.  REPORT 

unclassified 

b.  ABSTRACT 

unclassified 

c.  THIS  PAGE 

unclassified 

Standard  Form  298  (Rev.  8-98) 

Prescribed  by  ANSI  Std  Z39-18 


BMD  Agents:  An  Agent-Based  Framework  to  Model 
Ballistic  Missile  Defense  Strategies 


Duminda  Wijesekera 
ISE  Department  and  CSIS 
George  Mason  University 
Fairfax,  VA  22030 

dwijesek@gmu.edu 


James  Bret  Michael 
Computer  Sci.  Department 
Naval  Postgraduate  School 
Monterey,  CA  93943 

bmichael@nps.edu 


Anil  Nerode 
Mathematics  Department 
Cornell  University 
Ithaca,  NY  14853-7901 

anil@math.cornell.edu 


ABSTRACT 

We  introduce  a  model-based  methodology  for  comparative  eval¬ 
uation  of  the  effectiveness  of  alternative  ballistic  missle  de¬ 
fense  strategies.  The  major  new  feature  is  that  BMD  is  mod¬ 
elled  as  a  distributed  system  of  interacting  agents  in  which 
some  agents  are  physical  (such  as  sensors  and  launch  systems) 
and  some  are  rule-based  (such  as  decision  makers  and  threat- 
evaluators).  In  this  model,  doctrine,  policy  and  organizational 
structures  are  treated  as  rule-based  constraints  on  system  be¬ 
havior.  This  will  allow  both  analytical  and  simulation  model¬ 
ing  of  alternative  BDM  strategies  based  on  varying  scenarios. 
Alternative  proposals  can  be  evaluated  side  by  side  by  analy¬ 
sis  and  simulation  of  the  effects  of  putting  in  and  taking  out 
physical  and  rule  based  agents  and  constraints  for  alternative 
sensors,  launch  systems,  threat-evaluation  systems,  command 
and  control  systems,  and  doctrine.  The  effects  of  alternative 
organization  can  be  evaluated.  We  demonstrate  the  use  of  the 
methodology  for  evaluating  three  candidate  command  struc¬ 
tures:  hierarchical,  partially  flattened,  and  flattened. 

Key  Phrases:  Agents,  Ballistic  Missile  Defense,  Distributed 
Decision  Architecture,  Organizational  Structure,  Policy. 

1.  INTRODUCTION 

Strict  time  budgets  imposed  on  decision  making  in  the  con¬ 
text  of  defending  against  attack  from  modern  ballistic  missiles 
have  rendered  the  traditional  command  structure,  in  which  many 
humans  are  placed  in  decision  loops  that  rely  on  serial  com¬ 
munication  along  the  decision  making  chain,  impractical.  The 
upper  bounds  on  decision-times  for  assigning  a  weapon  to  in¬ 
tercept  a  threat  object  ranges  from  approximately  thirty  sec¬ 
onds  for  short-range  ballistic  missiles  to  a  few  tens  of  min¬ 
utes  for  long-range  ballistic  missiles.  In  general,  the  likeli¬ 
hood  of  intercepting  a  ballistic  missile  decreases  as  the  missile 
nears  its  target.  For  instance,  in  the  terminal  phase  of  flight, 
the  threat  missile  can  deploy  difficult-to-defeat  countermea- 
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sures.  Even  if  the  interceptor  destroys  the  ballistic  missile  and 
its  warhead,  the  second-order  effects  of  the  kill  would  pose  a 
danger  to  civilians  in  whatever  area  the  warhead  remnants  and 
missile  debris  would  fall.  Intercepting  a  ballistic  missile  in 
the  midcourse  of  its  flight  could  be  problematic,  as  hundreds 
of  small  bomblets  could  be  released  from  the  ICBM  just  after 
its  ascent.  Because  these  bomblets  would  strike  separately,  no 
known  midcourse  or  terminal  defense  can  halt  such  an  attack 
[6]. 

However,  there  is  a  lower  bound  on  the  decision-time  to 
launch  a  weapon,  because  a  commander  cannot  assign  a  weapon 
to  engage  an  object  until  it  has  been  classified  as  a  threat  mis¬ 
sile.  Further,  the  commander  may  have  to  receive  weapon- 
release  authority  from  higher-ups  in  the  chain  of  command, 
coordinate  the  use  of  available  weapons  with  other  comman¬ 
ders,  and  plan  crisis-action  before  assigning  a  weapon.  The 
key  point  here  is  that  the  the  sum  of  the  sensor-processing, 
communication,  weapon-assignment,  and  actuation  (i.e.,  re¬ 
lease  of  the  weapon)  delays,  can  be  greater  than  the  total  time 
than  that  the  threat  missile  is  in  its  boost  phase.  Therefore, 
it  may  not  be  possible  to  intercept  the  threat  missile  in  the 
boost  phase  with  today’s  technology,  although  this  situation 
may  change  with  technical  advances  that  may  come  in  the  near 
future  [7].  According  to  Athans  [1]  the  effectiveness  of  the  tac¬ 
tical  decisions  impact  all  reasonable  measures  of  effectiveness 
(MoE),  such  as: 

1.  Do  interceptors  destroy  threat  missiles? 

2.  Do  follow-up  shots  destroy  missed  missiles? 

3.  Does  the  system  hold  fire  when  an  object  is  reclassified 
as  benign? 

Similarly,  examples  of  measures  of  performance  (MoP)  in¬ 
clude: 

1 .  Do  interceptors  destory  threat  missiles  at  sufficiently  high 
altitude  to  negate  the  effect  of  the  warheads,  payload 
(e.g.  chemical  weapons  of  mass  destruction)? 

2.  Do  launched  weapons  have  time  to  engage  threat  mis¬ 
siles? 

3.  Can  the  system  discriminate  between  benign  objects  and 
threat  missiles? 


One  means  to  address  such  measures  of  effectiveness  and 
performance  is  to  investigate  means  to  improve  the  effective¬ 
ness  and  performance  of  the  organizational  structure  and  pro¬ 
cesses  that  support  decisions  made  by  the  BMD  system.  A 
command  structure  needs  to  provide  for  unity  of  command, 
unity  of  effort,  a  common  operating  picture,  and  situational 
awareness.  In  order  to  ensure  these  properties,  it  is  necessary 
to  identify  the  information-flow  requirements  and  decision¬ 
making  aids  to  permit  the  commanders  to  issue  orders  in  a 
timely  manner.  Weller  et  al.  [13]  propose  two  alternative  com¬ 
mand  structures  to  the  status  quo :  a  compressed  chains  of  com¬ 
mand  (CoC)  for  regional  commanders  and  a  flattened  CoC  for 
BMD.  The  motivation  for  flattening  the  command  structure  is 
to  reduce  the  decision-time.  Weller  et  al.  propose  that  speed, 
flexibility,  and  situational  awareness  be  used  to  compare  and 
contrast  the  alternative  command  structures.  However,  Athans 
[2]  noted  that  there  is  no  systematic  methodology  to  do  so. 

We  present  a  methodology  for  systematically  modeling  or¬ 
ganizational  structures  that  assess  the  MoEs  and  MoPs  due  to 
the  cause-and-effect  relationships  inherent  in  distributed  deci¬ 
sion  making.  We  model  them  as  a  distributed  team  of  decision¬ 
making  agents.  Doctrine  and  policy,  modeled  in  the  form  of 
rules,  constrain  the  behavior  of  agents  within  the  system.  Tra¬ 
ditionally  policy  is  considered  a  choice  of  actions  among  a  set 
of  lawful  alternatives  and  doctrines  is  recognized  as  a  means 
by  which  the  chosen  policy  will  be  effectuated.  We  demon¬ 
strate  the  use  of  the  methodology  to  evaluate  three  candidate 
command  structures  for  global  BMD:  hierarchical,  partially 
flattened,  and  flattened. 

Section  2  of  this  paper  describes  basic  requirments  for  C2 
models.  Section  3  presents  the  formal  syntax  of  our  agents. 
Section  4  describes  our  syntax  to  combine  them  in  forming 
organizational  structures  for  C2  systems.  Section  5  presents 
our  analysis  and  section  6  presents  related  work.  Section  7 
concludes  the  paper. 

2.  MODELING  REQUIREMENTS 

BMD  planning  both  deliberate  and  crisis-action  planning. 
Deliberate  planning ,  involves  creating  templates  for  prosecut¬ 
ing  missile  engagements.  Crisis-action  planning.  The  param¬ 
eters  described  in  the  templates  are  filled  in  when  a  situtation 
occurs  and  instantiated  within  the  components  of  the  BMD 
system.  Crisis-action  planning  is  used  to  modify  plans  as  a 
battle  progresses.  However  crisis-planning  difficult  to  perform 
during  a  missile  engagement  because  the  decision  time  bud¬ 
gets  are  short.  The  planners  follow  a  conceptual  operational 
paradigm  referred  to  as  a  kill  chain  consisting  of  surveillance, 
detection,  tracking,  identification  of  targets,  weapons  assign¬ 
ment,  engagement,  and  kill  assessment  [8,  3].  The  execution 
of  tasks  within  the  kill  chain  are  geographically  distributed, 
where  surveillance  requires  a  geograhically  dispersed  collec¬ 
tion  of  sensors,  referred  to  as  sensor  networks.  Detection  re¬ 
quires  collecting  information  from  many  types  of  sensors  and 
track  processing  may  require  equipment  capable  of  continu¬ 
ously  tracking  flight  trajectories.  Weapons  assignment  may  be 
the  responsibility  of  a  commanding  officer.  Engagement  of 
the  threat  missile  may  be  allocated  to  a  commander  in  a  differ¬ 
ent  theater  or  region  than  that  from  which  the  interceptor  was 
launched.  Kill  assessment  may  be  performed  across  regions 
or  theaters.  Thus,  the  kill  chain  is  cooperatively  executed  by  a 
collection  of  entities  that  are  tasked  to  carry  out  some  parts  of 


the  overall  objective:  to  destroy  threatening  missiles. 

Entities  that  participate  in  a  kill-chain  are  legal  combatants, 
goverened  by  individually  assigned  duties  and  policies.  There¬ 
fore,  we  refine  the  principle  objective  of  this  paper  to  develop 
a  framework  to  model  these  duties  of  individuals  that  partic¬ 
ipate  in  kill  chains  designed  for  ballistic  missile  defense  and 
to  be  able  to  measure  their  effectiveness  and  performance.  We 
intend  to  bring  the  formal  tools  that  are  used  to  model  and  an¬ 
alyze  policies  in  distributed  systems  to  one  of  the  imporatant 
defense  objectives.  In  order  to  do  so,  we  propose  a  framework 
that  provides  the  building  blocks  to  specify  the  duties  of  the 
entities  that  execute  kill  chains  as  using  event-condition-action 
rules  (EC A),  similar  to  those  used  in  agent-based  systems.  We 
then  show  how  our  framework  can  be  used  to  construct  dif¬ 
ferent  command  structures  that  represent  policies  adpoted  by 
military  organizations.  We  then  show  how  to  analyze  their  ef¬ 
fectiveness  in  achieving  the  eventual  military  objectives  that 
they  are  designed  to  fulfil.  The  next  section  introduces  the 
formal  syntax  of  our  modeling  language. 

3.  FORMAL  SYNTAX 

Because  the  duty  cycles  of  our  BMD  agents  are  formalized 
as  ECA  rules,  we  first  define  their  formal  syntax  and  show  how 
to  build  agents  that  can  execute  tasks  in  a  BMD  kill  chain.  We 
compose  these  agents  to  build  appropriate  C2  structures. 

Definition  1  (Events).  £  =  {a  i  >  1}  is  a  set  of 
predicates  of  finite  arities,  referred  to  as  events.  The  values  of 
their  attributes  are  chosen  from  a  finite  collection  of  domains, 
say  DO  Mi , . . . ,  DOMn. 

For  example,  detected  ( flyObj  ,  lat30° ,  long28.5°  , 
GMT  11 .20.37)  is  our  symbol  for  the  event  that  a  flying  ob¬ 
ject  was  detected  at  latitude  30°  and  longitude  28.5°  at  time 
GMT  11.20.37.  We  now  define  the  syntax  for  the  conditions. 

Definition  2  (Conditions).  Let  C  =  {a  :  i  >  1} 
be  a  collection  of  predicates  of  various  arities  disjoint  from  8, 
whose  attribute  values  come  from  domains  DO  Mi , . . . ,  DO  Mm 
for  some  m  >  n.  We  say  that  these  constitute  atomic  condi¬ 
tions.  We  recursively  define  conditions  as: 

1.  An  atomic  condition  is  a  condition. 

2.  If  ci  and  C2  are  conditions,  then  so  are  ci  Ac2,  ci  Vc2,  -ici. 

For  example,  shortRangeStockpile  (Country- A, 
1000)  A  status (atWar, Country-A, Country-B)  is 
a  condition  that  says  that  there  are  1000  short  range  counter¬ 
missiles  in  country- A  and  that  it  is  at  war  with  Country-B.  We 
now  define  ECA  rules  that  specify  how  our  BMD  agents  react 
to  events  under  a  given  set  conditions.  In  order  to  do  so,  we 
first  define  communication  and  execution  primitives  used  by 
them. 

Definition  3  (Addresses  and  Actions).  A  domain 
DO  Mo  is  the  address  space.  An  address  term  is  either  an  ad¬ 
dress  constant  (i.e.,  an  element  from  DO  Mo )  or  a  variable. 

send(E,ys ,  Yr ,  £,  z):  Is  referred  to  as  a  send  primitive  where 
E  is  an  event  and  Ys  and  Yr  are  address  terms,  t  is  a 
non-negative  real  number,  send  (E,  Ys,  Yr,t)  is  our 
notation  for  an  agent  Ys  informing  an( other)  agent  Yr 
of  an  occurance  of  the  event  E.  z  contains  any  other  data 
used  in  the  event.  The  message  is  enqued  for  delivery  at 
local  time  t. 


recv(E,Ys  ,Yr,t,z):  is  referred  to  as  a  receive  primitive  where 
E  is  an  event  and  Ys  and  Yr  are  address  terms  and  t  is 
time,  recv  (E fYs,Yr,t)  is  the  notation  for  an  agent 
Yr  receiving  event  E  sent  hy  an  agent  Yr  at  local  time  t. 
z  is  the  same  as  before. 

exec (/,  z):  is  referred  to  as  an  execute  primitive  where  f  is  a 
function  call  with  parameters  z  -  our  notation  for  exe¬ 
cuting  f(z)  within  a  BMD  agent. 

Definition  3  has  primitives  that  can  be  used  by  an  agent  Ys 
to  inform  another  agent  Yr  about  an  occurance  of  an  event 
E.  The  time  of  occurrences  of  E,  the  time  of  sending  t  by  Ys 
(i.e.,  t  in  send(E,Ys,  Yr,  £)),  and  the  time  of  receipt  of  E  at 
Yr  (i.e.,  t  in  recv(E,Ys ,  Yr ,  t ))  are  all  measured  with  respect 
to  local  times  of  the  involved  agents  and  do  not  have  to  be 
equal.  Consequently,  our  framework  makes  no  assumptions 
about  synchronized  clocks.  We  now  use  these  communication 
messages  in  rules  that  specify  agent  behavior. 

Definition  4  (Event-condition-action  rules).  An 
event-action  condition  rule  (EC A  rule)  is  of  the  form 

If(recv(E,Ya,Yr,t,z))  and  (C)  then  f 
or  of  the  form 

If(C)  then  f 

where: 

1.  E  is  an  event  and  Ys ,  Yr  are  address  terms. 

2.  C  is  a  condition. 

3.  f>  is  either  exec  ( f,  z)  or  send  ( EfYs,Yr ,  t,  z)  where 
E  is  an  event  and  Ys  is  the  sender's  address,  Yr  is  the 
receiver’s  address,  t  is  the  current  local  time  of  the  send¬ 
ing  agent  and  z  contains  auxiliary  data. 

We  use  the  notational  convention  that  an  agent  refers  to 
its  own  address  as  self.  Although  our  syntax  can  be  used 
to  specify  many  agent  behaviors,  we  define  three  kinds  of 
agents:  theater  commander  agents  (TCAs),  regional  comman¬ 
der  agents  (RCAs)  and  strategic  commander  agents  (SCAs), 
reflecting  the  C2  structures  used  in  BMD  management.  These 
agents  exibit  the  following  common  behaviors. 

1 .  Agents  operate  under  three  modes:  peacetime,  pre-hostilities 
and  hostilities,  and  when  appropriate,  change  their  own 
mode  and  call  for  others  to  do  so. 

2.  Agents  obtain  sensory  cues  from  and  (where  appropri¬ 
ate)  update  sensory  information  to  a  virtual  address  re¬ 
ferred  to  as  the  sensorNet. 

3.  Agents  obatain  operational  status  of  weapons  from  a 
virtual  address,  and  if  appropriate,  update  information 
about  them,  referred  to  as  the  weaponsNet. 

Consequently,  depending  on  the  received  commands  or  their 
own  decisions  (perhaps  based  on  local  computations),  they 
change  modes  and  pass  selected  changes  of  sensed  data  or 
weapons  states  to  the  appropriate  virtual  entities.  We  now 
specify  the  behavior  of  the  aforementioned  agents. 


Policy  1:  TCA(id,mySuperiors, sensorNet, weaponsNet) 

Initialize  mySuperiors ,  weaponsNet , 
sensorNet 

Input:  from  mySuperiors,  sensorNet, 
weaponsNet 

Output:  to  sensorNet , weaponsNet 

Data:  mode ,  cancelable  []  ,  nonCancelable  [] 

/*z  contains  the  position  (x,y,z),  velocity  (vx,vy,vz), 
acceleration  ( ax,ay ,  az)  at  time  t  etc  that  are  used  to 
compute  possible  position  and  projected  flight 
trajectory,  etc.  */ 

while  recv(E ,  Ys,  Yr,  t,  z)  do 
switch  condition  do 

case  (Y8  =local  sensor) 

L  send(s,self  ,sensorNet,z,time) 

case  (E  =switchMode) 

[_  exec(switchMode,newMode) 
case  (E  =launch  and  Ys  EmySuperiors  and 
Yr  =self) 

for  j-1  to  n  do 

if  exec(withinHit, threat,  L  sei  fj ,  Ltsei  fj  ) 

then 

as  signTargetToMB  (Lsei  ,  msei  fj) 

/* Assume  Jth  MBA  can  do  Jth  job  */ 
send(assigned,self ,  weaponsNet, 

X10W,mSelf,j  ,  Lselfj  ,  LtSelf,j  ) 
exec(lock,rasez/,j  •>  L seif ,j,Ltsei f  j ) 

send(locked, weaponsNet ,  self, 

_  now,rrij,  L  seif  Ltsei  fj) 

else 

|_  send(cantHit,self,Ys  ,now,Lsez f,j ) 

case  (E=enterNonCancelPhase, msei f,j  ) 

send(enterNC, weaponsNet ,  self , now ,mseif,j) 
exec(proceed  ,msei  fj ) 

case  (E  —cancel  and  Ys  EmySuperiors  and 
Yr  —self) 

for  (j=l  to  n)  do 

identifyMBA(Csez  f,j ,  msei  f,j ) 

/* assume  Jth  job  for  Jth  MBA  */ 

if  cancelable( msei f,j  )  then 

exec(cancelLaunch,rasez  f,j ) 

send(cancel, weaponsNet ,  self  ,now,rasez/, 

else 

|_  send(cantCancel,self,ys  ,now,77isez f,j ) 

case  (E  =  hold,  msez/,(i=i,n  by  dseif,j, 

Ys  CmySuperiors  andYr  —self) 
for  (j=l,n)  do 

identifyMB(ifSeZ  f,j ,  msei  f,j ) 

/*  Assume  Jth  job  for  Jth  MBA  */ 

if  holdable(msei  f,j )  then 

hTimer  seif  —  now  +  hseif,j 
exec(setHoldTimer,rasez f,j ,  z,  dsei f,j ) 
send(hold, weaponsNet ,  self  ,now,mseif,j) 

case  (E  =  hTimer,  now  =  hTimer seif,j) 
exec(reLaunch  ,msei  f,j ,  ^,now) 
send(reLaunch, weaponsNet ,  self, now ,mseif,j) 
case  (E  =  reLaunch,mseif,j, 

Ys  CmySuperiors  andYr  —self) 
if  delayed(msei f,j )  then 

exec(reLaunch,rasez  f,j  ,now) 

send(reLaunch, weaponsNet ,  self, now ,mseif,j 

send(weaponsUpdate, weaponsNet ,  self ,Ys,now,i) 
send(sensorUpdate, sensorNet ,  self ,YS, now, z) 


3.1  Theater  Commander  Agents 

Theater  commander  agents  are  those  that  operate  the  mis¬ 
siles.  In  addition  to  the  generic  behavior,  we  assume  that  they 
work  in  a  duty  cycle  that  consists  of: 

1.  Aquire  a  target  and  lock  on  to  it. 

2.  Launch  a  missile.  If  asked  and  if  is  possible,  delay  or 
intercept  (i.e.,  hold  fire). 

3.  Assess  the  success  of  launched  weapons  (i.e.,  access 
kill). 

Policy  1  specifies  the  behavior  of  TCA  agents.  As  stated, 
TCAs  perform  a  duty  cycle  consisting  of  executing  commands 
sent  by  superiors  (referred  to  as  mySuperiors  in  Policy  1) 
and  updating  the  status  of  sensors  and  weapons  under  its  com¬ 
mand  to  the  sensorNet  and  weaponsNet,  respectively. 

The  commands  expected  from  superiors  are  launching,  can¬ 
celing,  delaying  and  relaunching  weapons. 

In  order  to  specify  the  TCA  behavior,  Policy  1  uses  sev¬ 
eral  auxiliary  function  calls.  Because  military  forces  function 
differently  under  peacetime,  preparing  for  hostilities  and  dur¬ 
ing  hostilities,  we  model  three  modes  of  operation  peace,  pre- 
War  and  war  for  our  agents.  The  procedure  switchMode 
switches  the  modes  between  peace,  preWar  and  war.  The 
procedures  lock,  launch  locks  a  missile  to  a  target  and 
launches  a  missile  towards  a  target.  Similarly,  wi  thinTarget, 
cancelable  returns  a  binary  value  indicating  if  a  target  is 
within  reach  of  its  missile  and  is  in  a  position  to  cancel  the 
launching  process.  The  function  delayable  returns  true  if 
the  missile  launching  is  delayable  and  the  command  delay 
postpones  the  launching  by  a  specified  amount  of  time.  reLaunch 
launches  an  already  delayed  launch.  The  two  functions 
assignTargetToMB  and  identifyMB  assign  a  launch 
request  Lsei  fj  to  a  missile  battery  msei  fj  and  identify  a  can¬ 
cel  or  hold  requests  (given  by  Csei f,j  or  Hsei fj  respectively) 
to  the  missile  battery  msei  fj  originally  assigned  to  launch  it, 
respectively.  Although  the  latter  is  a  table  lookup,  the  former 
solves  a  resource  allocation  problem.  Implementation  of  these 
functions  are  device  specific,  but  their  behavior  satisfies  the 
specification,  and  reflects  BMD  policies. 

As  specified  in  Policy  1,  TCAs  receive  instructions  to  launch, 
delay  or  launching  of  a  collection  of  missiles  as  a  part  of  a 
regional  objective.  Based  on  the  request  and  its  own  calcu¬ 
lations,  the  receiving  TCA  allocates  a  local  missile  battery  to 
launch  the  requested  missile.  If  possible  delaying  and  caneling 
requests  are  also  honored.  Due  to  the  time  taken  for  a  missile 
to  be  dispatched,  at  any  given  time  there  could  be  many  mis¬ 
siles  that  are  on  their  way  from  the  TCA  to  their  targets.  The 
last  two  steps  of  the  duty  cycle  update  the  weaponsNet  and 
sensorNet  of  the  status  of  their  own  weapons  systems  and 
sensory  devices. 

3.2  Regional  Commander  Agents 

Policy  2  specifies  the  behavior  of  regional  commander  agents 
(RCAs).  An  RCA  coordinates  the  activities  of  the  TCAs  under 
its  command.  In  this  process,  they  are  handed  down  regional 
military  objectives  that  have  to  be  met  by  devising  and  exe¬ 
cuting  an  engagement  plan  using  its  TCAs.  That  may  include 
launching  many  missiles  at  different  times,  (such  as  firing  a 
second  missile  if  the  first  fails  to  destroy  or  damage  the  tar¬ 
gets).  Sometimes,  RCAs  may  not  have  superiors  so  that  they 
have  to  decide  when  to  initiate  a  regional  operation. 


Policy  2  uses  several  auxiliary  functions  and  procedures. 

The  function  startRegional  returns  true  when  a  superior¬ 
less  RCA  is  to  start  its  own  battle  plan.  The  procedures 
computeBattlePlan  {z,  w,  canAchieve)  computes  a 
battle  plan  described  by  the  attribute  vector  w  from  a  regional 
military  objective  described  by  the  vector  of  parameters  z. 
canAchieve  evaluates  to  true  if  and  only  if  the  requested 
plan  can  be  achieved  with  resources  available  to  the  RCA. 

Policy  2  assumes  that  only  one  plan  comes  back  as  achiev¬ 
able.  In  the  more  general  case,  there  could  be  more  than  one 
plan  comming  back  multiple  plans  that  are  concurrently  achiv- 
able.  Our  ongoing  work  addresses  this  requirment.  Com¬ 
mands  newObj  ective ,  chgObj  ective  and  cnclObj  ective 
are  issued  by  SCAs  to  begin  a  new,  change  or  cancel  a  regional 
objective  respectively.  If  requested  objectives  cannot  be  met, 
then  a  RCA  sends  the  message  cant  Achieve  back  to  its  su¬ 
periors  to  inform  its  inability  to  fulfil  the  request  with  exisiting 
resources.  If  the  objective  can  be  met,  the  RCA  computes  a 
battle  plan  that  consists  of  launching,  delaying  and  cancelling 
existing  schedules  for  TCAs  under  its  command  and  informs 
them  appropriately,  using  the  following  functions. 


Policy  2:  RCA(id, mySuperiors, myTCAs, sensorNet, weaponsNet) 


Initialization:  Get  addresses  of  mySuperiors , 
myTCAs,  sensorNet,  weaponsNet 
Input:  Commands  from  mySuperiors,  information 
from  sensorNet  and  weaponsNet 
Output:  commands  to  myTCAs 
while  recv(E ,  Ys,Yr,t ,  z)  or  mode=war  do 
switch  condition  do 

case  (E  —switchMode) 

[_  exec(switchMode,newMode,now) 
case  ( E  —newObjective 
ME  —chgObjective\JE  —cnclObj  ective)  and 
t  —now  and  Ys  £ mySuperiors  and  Yr  —self] 
or  [ mySuperiors =  0A  startRegional]) 
computeB  attlePlan(£,  w,  canAchieve) 
if  (canAchieve)  then 

computeFiringMBAandTime(u;, 

(TCAi,Lij,U,j)) 

computeHoldingMBAandTime(fi;, 

(TCAi, 

computeCancelMBAandTime(fi;, 

C TCAi ,  Cij , 
if  E  —cnclObj ective  then 
|_  cancelBattlePlan() 

for  i-1  to  n  do 

send(launch, self, TCAi ,  Lij ,  Ltij  ,now) 
send(holdFire, self, TCAi,  Hij,  H tij, now) 
send(cancel,  self,  TCAi ,  Cij ,  Ctij  ,now) 

else 

|_  send(cantAchieve, self, Ys, now, z) 


computeFiringMBAandTime(uJ, ( TCAi ,  Ll:J ,  tij)):  Given 
a  high  level  objective  characterized  using  the  attribute 


vector  w  for  TCAi  that  is  under  the  command  of  the 
given  RCA,  this  procedure  determines  that  the  missile 
Lij  to  be  launched  at  time  Uj. 

computeHoldingMBAandTime(u;,(TCAi ,  Hij , Uj)):  Given 
a  high  level  objective  characterized  by  the  attribute  vec¬ 
tor  w  for  TCAi  that  is  under  the  command  of  the  given 
RCA,  this  procedure  determines  that  the  missile 
needs  to  be  delayed  by  a  time  of  Uj . 

computeCancelMBAandTime(u;,(TCAi,  CV7 ,  Uj)):  Given 
a  high  level  objective  characterized  by  the  attribute  vec¬ 
tor  w  for  TCAi  that  is  under  the  command  of  the  given 
RCA,  this  procedure  determines  that  launching  missile 
Cij  needs  to  be  cancelled  at  time  Uj. 

After  computing  the  schedules,  the  RCA  sends  them  to  the 
appropriate  TCAs  accordingly.  As  will  be  seen  in  section  4, 
(atypically)  under  an  altered  C2  structure,  an  RCA  may  be 
required  to  function  without  a  superior. 

3.3  Strategic  Commander  Agents 

SC  As  model  global  strategy  planners  such  as  US  STRAT- 
COM  or  NATO  commanders  that  coordinate  many  regional 
crises  simultaneously.  In  order  to  specify  such  behaviors,  SCAs 
use  many  procedures.  Based  on  received  information, 
computeMode  computes  the  new  operational  mode  from  the 
old  one.  toCol leagues  compute  the  information  conveyed 
to  their  colleagues.  The  procedure  regionalObj  ective 
computes  the  collection  of  regional  objectives  that  are  to  be 
conveyed  to  their  subordinates.  In  case  some  of  these  subor¬ 
dinates  are  TCAs,  the  procedure  convertToOrders  con¬ 
verts  regional  objectives  to  an  explicit  set  of  launching  orders. 

As  policy  3  shows,  SCAs  receive  information  from  their  col¬ 
leagues,  sensorNet  and  weaponsNet. 

4.  COMPOSING  C2  STRUCTURES 

This  section  describes  how  to  create  composite  C2  struc¬ 
tures  that  have  been  proposed  for  BDM  policies.  They  are 
inherently  hierarchical.  For  example,  a  SCA  is  at  the  top  with 
a  set  of  RCAs  immediately  below  them.  Each  RCA  has  a  set 
of  TCAs.  In  addition,  all  of  them  read  the  sensorNet  and 
the  weaponsNet  to  obtain  sensory  cues  and  operational  sta¬ 
tus  of  weapon  systems.  If  sensors  or  weapons  are  under  their 
command,  they  update  these  nets  accordingly. 

4.1  Command  Structures 

In  order  to  model  the  described  C2  models,  we  define  syn¬ 
tactic  structures.  They  consist  of  trees  of  command  agents. 

We  then  describe  an  example  scenario  and  show  how  to  com¬ 
putationally  assess  the  advantage  and  disdavantage  of  each  of 
these  structures. 

Definition  5  (C2  Structures).  A  command  structure 

is  a  7 -tuple  ( ID,  tcalD,  rmalc, scalD,  tcaSehema,  rcaSchema, scaSchema ) 
where  ID  is  a  finite  set  of  identifiers  of  all  the  entities  of  the 
model  rcalD,  scalD  ans  tcalD  are  the  identities  of  the  TCAs, 

RCAs  and  SCAs.  Additionally,  ID  includes  two  special  identi¬ 
fiers  senosrNet  and  weaponsNet  satisfying  the  following 
conditions. 


Policy  3:  SCA(id,myColleagues,myRMAs, sensorNet, weaponsNet) 


Initialization 

Get  addresses  of  myCol leagues ,  mySubs , 
sensorNet,  weaponsNet 

Input:  Information  from  sensorNet ,  weaponsNet, 
colleagues,  informants,  etc. 

Output:  Directives  to  subordinate  commanders 
Data:  mode 

while  recv(Es, sensorNet, self, now, z*s)  or 
recv( Ew,  weaponsNe  t, self, now,  z w )  or 
recv(  E,  my  Co  1  leagues, self, now, z)  or 
recv( E,  myS ub s,  self,  now,  z)  do 

computeMode(%  ,zA  ,now,newMode) 
computeToColleaguess(z,now) 
send(info,self,my  Co  1 1  e  ague  s  ,z,now) 
if  mode^newMode  then 
switchMode(newMode) 
send(chgMode,self,my  Sub  s ,  mode,  z,  now) 
if  mode -war  then 

send(chgMode,self,my  Sub  s  ,z,now) 

compRegionalObjectives(regzo?u ,  obji) 
for  i=l,n  do 

if  isRMA(regiorii)  then 

|_  send(regionalObj ective, self, regioni,  obji, now) 

else 

convertTolaunchOrder(r  egiorii ) 
send(launch, self, region  i ,  obji,  now) 


2.  tcaSehema,  rcaSchema  and  scaSchema  are  respectively 
sets  of  well  typed  (to  be  explaind  shortly)  instances  of 
the  following: 

TCA(  id,  my  Superiors,  sensorNet,  weaponsNet), 

RCA(  id, my  Superiors,  myTCAs,  sensorNet, weaponsNet), 
SCA(  id,  myColleagues,  myRMAs,  sensorNet,  weaponsNet). 
The  well  typedness  of  the  schema  instances  is  defined  as 
follows: 

(a)  All  instances  of  myColleagues  in  scaSchema 
instances  are  subsets  of  scalD. 

(b)  All  subordinate  instances  in  scaSchema  are 
subsets  of  rcalDUtcalD,  and  all  subordinate 
instance  of  rcsSchema  are  subsets  oftmalD. 

(c)  All  super ior  instances  in  tcsSchema  are  single- 
ton  subsets  of  rcalDUtcalD,  and  all  superior 
instances  of  rcaSchema  are  singleton  subsets  of 
scalD. 

(d)  Suppose  id,  id’C  ID  are  identifiers  of  two  schema 
instances,  say  Xcalnstance and  Ycalnstance, 
chosen  from  tcaSet,  rcaSet  or  scaSet.  Then, 
idCmySuperior  set  of  Xcalnstance  iff 

id’ Cmy Subordinates  of  Ycalnstance. 

Lemma  1  states  some  simple  conditions  satisfied  by  C2  struc¬ 
tures. 


1.  ID=tcaIDUrmaIDUscaIDU{sensorNet ,  weaponsNet}  Lemma  1  (C2  STRUCTURES).  C2  structures  satisfy  the 

where  sets  on  the  right  hand  side  are  disjoint.  following  conditions. 


Figure  1:  A  Hierarchical  C2  Tree  Figure  2:  A  Partially  Flattened  C2  Tree 


1.  Every  C2  structure  is  a  forest  of  trees. 

2.  Every  tree  in  a  C2  structure  has  at  most  3  levels,  in 
which  every  path  from  a  root  to  a  leaf  lists  the  agents 
in  the  order  [SCA>RCA>TCA] 

We  omit  the  trivial  proof  of  Lemma  1 ,  and  give  three  exam¬ 
ple  C2  structures. 

4.2  Example  C2  Structures 

We  specify  three  C2  structures  that  have  been  proposed  for 
BMD.  The  first  one  shown  in  figure  1  has  a  SCA  at  the  top 
with  two  RCAs  directly  below.  Every  RCA  has  two  TCAs 
each.  To  specify  a  C2  structure,  we  use  the  ID  space  {0,1,2, 
11,12,21,22},  where  the  SCA  is  identified  as  0,  and  the  two 
RCAs  are  1  and  2  and  their  TCAs  are  identified  respectively  as 
11,  12,  and  21,22.  Thus  the  schema  that  specify  this  structure 
is  formally  described  as  the  septuple  (ID,tcaID,rcaID,scaID, 
tcaSchema,rcaSchema,scaSchema)  where  the  components  are 
given  as  follows: 

1 .  ID={0, 1 ,2, 1 1 , 1 2,2 1 ,22,sensorNet, weaponsNet} 

2.  scaID={0},  rcaID={l,2},  tcaID={  11,12,21,22}. 

3.  scaSchema={SCA(O,0,{  1,2}, sensorNet, weaponsNet)} 

4.  reaSehema={RCA(l,{0},{l  1,12}, sensorNet, weaponsNet), 
RCA(2,{0}, {21, 22}, sensorNet, weaponsNet)} 

5.  tcaSchema={TCA(ll,{l}, sensorNet,  weaponsNet), 
TCA(12,{1}, sensorNet, weaponsNet), 

TCA(  1 1 ,{ 1 }, sensorNet,  weaponsNet), 

TCA(12,{1}, sensorNet, weaponsNet)}. 

Figure  2  shows  a  structure  in  which  the  RCAs  are  elim¬ 
inated  and  therfore  the  SCA  directly  commands  the  TCAs. 

Its  formal  definiton  is  obtained  by  using  the  following  choice 
of  the  septuple  (ID,tcaID,rcaID,scaID,  rcaSchema,rcaSchema, 
scaSshema). 

1 .  ID={0, 1 ,2, sensorNet, weaponsNet} 

2.  scaID={O},rcaID=0,  tcaID={l,2}. 

3.  scaSchema={SCA(O,0,{  1,2}, sensorNet,  weaponsNet)} 

4.  teaSehema={TCA(l,{0}, sensorNet, weaponsNet), 
TCA(2,{0}, sensorNet, weaponsNet)} 


The  third  example  given  in  figure  3  shows  a  structure  in 
which  the  TCAs  autonomously  address  BMD  threats.  Its  for¬ 
mal  definiton  is  obtained  by  using  the  following  choice  of  the 
septuple  (ID,tcaID,rcaID,scaID,rcaSchema,rcaSchema,  scaSchema). 

1 .  ID={0, 1 ,2, sensorNet, weaponsNet} 

2.  scaID=rcaID=0,  tcaID={l,2}. 

3 .  tcaSchema={TCA(  1 ,0, sensorNet, weaponsNet), 

TCA(2,0, sensorNet, weaponsNet)} 


sensorNet 


Interaction  with  sensorNet 
Interaction  with  weaponsNet 
Commands 


Negotiations 


Figure  3:  A  Flattened  C2  Tree 


5.  METRICS  FOR  C2  STRUCTURES 

The  quality  of  a  C2  structue  depends  upon  the  application 
specific  measures  of  effectiveness  (MoE)  and  measures  of  per¬ 
formance  (MoP).  For  a  single  weapon,  we  use  measure  of  ef¬ 
fectiveness,  as  the  former  is  considered  as  a  product  of  avail¬ 
ability,  reliability  and  its  capability,  and  timing  where  the  first 
two  are  expressed  as  probabilities. 

Because  our  model  is  not  intended  to  discriminate  one  kind 
of  weapon  from  another,  we  do  not  distinguish  between  tradi¬ 
tional  measures  of  individual  weapon’s  effectiveness  and  per¬ 
formances  based  on  its  hardware  characteristics.  But  we  take 
them  as  given  and  develop  measures  of  overall  system  effec¬ 
tiveness  and  perforamance  that  can  distinguish  potential  trade¬ 
offs  between  organizational  policies.  In  developing  such  a 
methodology,  we  propose  to  metrize  the  loss  of  fidelity  suf¬ 
fered  in  going  from  a  hierarchical  C2  strcuture  to  a  flattened 


Function  Call 

Symbolic  Delay 

exec(withinHit,Lsez  f,j ,  Ltsei  fj) 

twH  it 

assignTargetToMB(Lsez  fj ,  Ltsei  fj) 

taT  arget 

cancelable(rasez  f,j ) 

tevalCan 

delayed  (mseif,j) 

t delayed 

holdable(msez/,j) 

tevalH  old 

exec(setHoldTimer,rasez  f,j ,  Lsei  ,  Ltsei  fj ) 

ttimer 

exec(lock,rasez/,j  •>  Lseif^j ,  Ltseif^j^) 

tlock 

exec(cancel,msez/,j  5  Lseif,j ,  Lt  sei  f  ?j) 

tcancl 

exec(reLaunch,msez/,j  ?  Lseif,j  1  Lt  sei  f  ?^) 

treL 

identify  MB  A((7sez  f,j ,  msei  fjj) 

tidM 

send(),  recv() 

tcom 

Interruptible  launch  time 

tint 

non-interruptible  launch  time 

tnonint 

Case 

Time 

Launching 

Cancelling 

Holding 

reLaunching 

timer 

tl- \taTarget  T  2 .tcomm  T  twHit  T  tlock\ 
ft'  \pid  +  tCan  T  tevalCan  H"  tCom\ 

[tid  T  thold  T  tevalH old  T  tCom  H"  ttimer] 
treL  T  tCom  T  t delay ed 
treL  +  tcom 

Table  1:  TCA  Performance 


one,  vs.  the  time  saving  obtained  due  to  a  lower  communi¬ 
cation  cost.  This  can  be  compared  with  the  QoS  metrics  that 
measure  the  individual  stream  fidelity  vs.  inter- stream  syn¬ 
chronization  in  multimedia  systems  [15,  16]. 


Table  2:  Computing  TCA  Cycle  Times 


Function 

Time  | 

computeB  attlePlan(£ ,  fi;,canAchieve) 
computeFiringMBAandTime(fi;, 

tplan  | 

( TCAi ,  Lij ,  tij)) 

computeHoldingMBAandTime(uJ, 

t  f  Plan  | 

computeCancellMBAandTime(«J, 

thPlan  | 

(  TCAi  ,  CiJ  ,  tij  )) 

cancellB  attlePlan() 

tcPlan 
t  cancel 

Table  3:  RCA  Performance 

5.1  Metrics  for  TCAs 

We  consider  the  following  individual  metrics  for  TCAs. 

Availability:  Availability  measures  the  chances  that  a  weapon 
is  available  in  a  launchable  condition  at  the  requested 
time.  Suppose  that  a  TCA  has  n  weapons  available  out 
of  a  a  total  of  N.  Then  we  say  that  is  the  instanta¬ 
neous  availability  of  a  single  weapon  for  deployment. 
The  running  average  of  this  ratio  over  a  specified  num¬ 
ber  of  duty  cycles  is  taken  as  the  measure  of  availability. 

Reliability:  This  is  metrized  as  three  likelihood  values.  That 
of  the  reliability  of  the  process  of  launching,  canceling 
and  holding  fire  as  three  decimal  values  in  the  interval 
[0,1]  referred  to  as  Du  Dc  and  Du. 

Capability:  Capability  is  defined  as  the  ability  to  reach  a  tar¬ 
get.  Suppose  cap(x,  y,  z,Xh,yh,  Zh,t)is  the  likelihood 
that  a  target  at  (x,y,z)  hits  the  target  at  (xh,  yh,  Zh) 
(again  relative  coordinates)  within  the  time  t.  All  spa- 
cial  coordinates  have  their  origins  at  the  TCA. 

Timing:  The  timing  characteristics  of  TCAs  are  dependent 
upon  our  description  of  the  duty  cycle.  We  use  policy  1 
to  describe  these.  In  doing  so,  we  assume  that  the  duty 
cycle  is  not  put  on  hold  when  a  launch,  delay  or  can¬ 
cel  command  is  issued  (i.e.  the  calls  are  asynchronous 
in  operating  system’s  terminology).  Independent  of  the 
time  it  takes  to  call  for  a  launch,  we  assume  that  a  launch 
command  takes  Unt  +  tnonint  time  to  complete  and  any 
cancel  or  delay  order  must  be  received  within  Unt  time. 

Table  1  shows  the  performance  numbers  required  to  com¬ 
pute  the  cycle  time  of  a  TCA.  It  has  delays  for  some  major 
functions  such  as  assigning  launches  to  missile  batteries,  ini¬ 
tiating,  cancelling  and  delaying  launches  etc.,  that  are  duties 
of  a  TCA.  Based  on  the  value  in  table  1,  we  now  calculate  the 
period  of  a  TCA  duty  cycle.  Going  back  to  policy  1,  the  ini- 
tilization  cost  is  borne  only  at  the  begining,  and  therefore  does 
not  affect  its  cycle  time.  The  duty  cycle  is  specified  in  the 


while  loop  in  policy  1.  Therefore,  because  all  paths  through 
the  switch  statement  have  to  receive  an  event  and  output 
data  to  weaponsNet  and  sensorNet,  they  add  an  over¬ 
head  of  3 .tcomm-  Thus  the  finer  analysis  of  the  time  to  cycle 
now  depends  upon  the  options  taken  in  the  duty  cycle  is  given 
in  table  2. 

Based  on  the  values  in  table  1,  the  maximum  and  the  min¬ 
imum  cycle  times  of  TCA  agents  are  the  maximas  and  min- 
imas  of  the  values  in  the  right  hand  column  of  table  2.  We 
refer  to  them  as  and  £max  .  One  of  the  consequences  of 
our  agents  is  that  any  command  reaching  a  TCA  agent  will  be 
delayed  by  [tmin  and  tmax  ]  time  interval  before  it  is  consid¬ 
ered  by  the  agent,  and  will  be  acted  upon  a  within  the  same 
time  interval. 

5.2  Metrics  for  RCAs 

One  of  the  main  functions  of  a  RCA  is  to  coordinate  be¬ 
tween  the  various  TCAs  under  its  command.  Therefore,  the 
loss  of  a  TCA  would  result  in  the  loss  of  such  coordination. 
If  the  objective  is  to  attack  one  threat  missile  that  is  destroyed 
by  a  single  launch,  this  would  not  matter.  But  if  the  regional 
objective  is  to  destroy  a  sequence  of  missiles,  and  the  coordi¬ 
nation  function  is  not  taken  over  by  either  a  SCA  or  another 
TCA  (in  which  case  they  act  as  a  RCA),  then  there  would  be 
a  loss  of  coordination.  We  are  currently  working  towards  de¬ 
veloping  a  metric  to  quantify  the  effect  of  coordination.  But, 
given  our  design  of  the  RCA  duty  cycle,  we  can  measure  the 
time  it  takes  to  coordinate  between  different  TCAs. 

Table  3  shows  the  runtimes  used  to  compute  SCA  delays. 
Based  on  these  delays,  we  can  compute  the  cycle  time  taken 
for  RCAs  to  function.  The  maximum  and  the  minimum  of 
these  values  are  respectively  the  maximum  and  the  minimum 
of  switch  y  t  f  Plan  T  thPlan  T  tcPlan  T  3  .Ti.tCom  }  •  "We  denote 
them  by  and  t %ax  respectively. 

5.3  Metrics  for  SCAs 

SCAs  are  at  the  highest  level  of  the  C2  hierarchy.  As  stated 


Function 

Time 

computeMode(£,  u;,now,newMode) 
computeToColleagues(z,now) 

computeRegionalObjective((regzonj ,  obji)) 
convertToLaunchOrder(r  egioni ) 

tmode 

tcoll 

trObj 
t convert 

RCA  is  reduced,  with  an  increase  in  the  SCA  decision 
making  time  in  order  to  convert  regional  battle  objec¬ 
tives  to  launching  schedules.  Again,  the  launching  de¬ 
lay  is  Unt  +  tunint  •  As  noted  earlier,  the  time  advantage 
comes  at  the  cost  of  the  loss  of  inter-regional  planning 
and  coordination. 


Table  4:  SCA  Performance  Numbers 


before,  their  duty  cycle  consists  of  exchanging  information 
with  colleagues,  reading  inputs  from  the  sensorNet  and 
weaponsNet  and  change  its  mode  and  compute  regional  ob¬ 
jectives,  based  on  the  inputs.  Table  4  show  symbolic  values 
that  are  used  to  compute  the  period  of  the  SCA  duty  cycle.  Us¬ 
ing  the  data  from  table  4,  the  cycle  time  for  a  SCA  falls  within 
the  time  interval  [t^n,t^x]  where  tmin  is  2 tcom  +  tmode 
■I-  tcoii  and  tmax  is  tmin  “i-  tSWMode  trobj  for  a  SCA  that 
does  not  act  as  a  regional  commander  in  a  partially  flattened 
C2  structure.  Conversely,  the  latter  case  adds  another  delay  of 
m.t convert  to  the  maximum  where  the  SCA  acts  for  m  num¬ 
ber  of  RCAs.  We  can  use  these  delay  estimates  to  compute 
many  delays  due  to  C2  hierarchies  and  structures,  as  shown  in 
the  next  section.  That  would  require  communication  delays. 

5.4  Delays  due  to  C2  Structures 

Now  we  use  the  computed  delays  for  proposed  agents  and 
estimates  of  communication  delays  to  compute  performance 
characteristics  of  hierarchical,  partly  flattened  and  totally  flat¬ 
ted  C2  structures.  In  order  to  do  so,  we  assume  that  any  sender- 
to  receiver  communication  takes  a  maximum  of  tnet  delay. 
This  includes  all  communications  from  the  sensors  and  TCAs 
to  sensorNet  and  weaponsNet  respectively  and  between 
and  two  agents.  As  has  been  observed  earlier,  the  communica¬ 
tion  delay  -  although  cannot  be  bounded  above  by  a  uniform 
value  tnet  -  results  in  different  agent  systems  having  different 
degrees  of  awareness  over  the  C2  domain.  We  first  compute 
them  as  follows. 


Hierarchical  Structure:  In  the  hierarchical  structure,  a  sen¬ 
sory  information  issued  (simultaneously)  by  one  or  more 
sensors  take  2 .tnet  time  to  reach  the  SCA  because  it 
goes  via  the  sensorNet.  Because  the  hierarchical 
structure  shown  in  figure  1  has  three  levels,  a  total  com¬ 
munication  delay  of  4 .tnet  is  encountered.  However, 
each  agent  can  take  between  t^(^^S^CA  and 
2 -tm/ix^S^CA  time  to  make  its  decision.  The  total  time 
taken  between  a  sensor  receiving  a  cue  and  a  missile  be- 

>SCA 
v min 


vmzn 


-\~t, 


mxn 


and  4. tnet  +  2.tmacc  +2.tmaa.  +2  .t, 


°max  • 


The  launching  delay  of  Unt  +  tunint  needs  to  be  added 
to  this  in  order  for  a  missile  to  leave  the  launching  plat¬ 
form. 


Partially  Flattened  Structure:  In  a  partially  flattened  struc¬ 
ture,  as  the  one  shown  in  figure  2,  the  SCA  is  directly 
connected  to  its  TCAs.  Then,  based  on  the  explanation 
given  above,  the  time  difference  between  receiving  a  cue 
and  the  missile  being  ordered  to  be  launched  is  between 
a  minimum  of  3 .tnet  +  t^Am.tconvert  +  t^A  and  a 
maximum  of  3 .tnet  +  2.t^aA2.m.tCOnvert  +  2 .t^aA . 
As  expected  the  computation  delay  associated  with  the 


Flattened  Structure:  In  a  fully  flattened  structure  as  the  one 
shown  in  figure  3,  the  TCAs  act  on  their  own.  Therefore 
the  time  delay  between  a  sensory  cue  being  issued  by  a 
sensor  and  the  time  of  ordering  a  missile  is  between  a 
minimum  of  2 .tnet  +  t^A  and  a  maximum  of  2 .tnet  + 
2 -t^ix-  The  launching  delay  of  Unt+tunint  still  needs 
to  be  added  to  this  number  in  order  for  the  missile  to 
leave  the  launching  pad. 

5.5  Computing  MoEs  and  MoPs 

As  stated  earlier,  the  C2  domain  uses  many  measures  of  ef¬ 
fectiveness  and  performance.  But,  upto  now,  we  have  com¬ 
puted  end-to-end  delays  only.  We  now  visit  some  of  those  that 
were  described  in  section  1 . 

The  three  measures  of  effectiveness  we  considered  in  sec¬ 
tion  1  were  that  (1)  Did  an  interceptor  kill  the  threat  missile, 
(2)  Did  a  follow  up  kill  the  threat  missile  and  (3)  Did  the  C2 
structure  hold  the  fire  when  asked  to?  The  three  measures  of 
effectiveness  that  were  considered  are  (4)  Can  the  interceptor 
destroy  the  missile  at  a  safe  height?  (5)  Did  the  battle  man¬ 
ager  assign  a  weapon  in  time  to  destroy  the  threat?  (6)  Can  the 
BMD  system  identify  a  threat?  We  now  show  how  our  anal¬ 
ysis  can  help  answer  the  first  five  of  these  questions  with  the 
help  of  other  the  metrics  described  in  section  5.1. 

The  first  question  has  two  aspects.  The  first  is  that  is  there 
sufficient  time  to  hit  the  target  missile?  That  can  be  answered 
with  the  help  of  our  timing  analysis.  Suppose  that  time  be¬ 
tween  sensors  receiving  the  cues  of  the  threat  and  the  inter¬ 
ceptor  missile  leaving  the  launching  pad,  as  calculated  in  sec- 
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tion  5.4  is  between  tmin  and  tmax.  Then,  depending  upon  the 
continuous  cues  received  by  the  sensors,  we  can  compute  the 
projected  path  of  the  threat  missile.  Given  the  position  and 
flight  characteristics  of  the  threat  missile  and  its  position  on 
the  computed  path  at  the  time  of  launching  the  counter  missile, 
equations  of  motion  can  be  formed  and  solved  in  order  to  de¬ 
termine  if  they  meet  at  some  time.  Furthermore  the  computed 
height  of  the  intersection  point  can  be  used  to  determine  the 
distance  of  impact  to  friendly  territory  in  order  to  determine 
if  any  humans  are  at  danger  from  secondary  debries  -  thereby 
being  able  to  compute  an  answer  to  the  first  measure  of  perfor¬ 
mance,  re- stated  as  (4)  in  the  previous  paragraph.  The  second 
aspect  of  the  first  question  is  the  probability  of  the  intercep¬ 
tor  being  able  to  destroy  the  threat  missile.  This  is  a  hardware 
characteristic  of  the  TCA  that  needs  to  be  given  -  that  we  have 
listed  as  reliability. 

The  second  effectiveness  metric  has  two  aspects.  Firstly,  an 
RCA  can  ask  for  two  interceptor  missiles  to  be  scheduled  to 
be  launched  with  sufficient  time  lag  so  that  if  the  first  fails  to 
destroy  the  threat  then  the  second  can  be  released  and  canceled 
otherwise.  Alternatively,  the  RCA(s)  can  keep  generating  re¬ 
quests  to  destroy  an  airborne  missile  throughout  its  flight.  The 
maximum  number  of  times  this  call  can  be  safely  repeated  can 
be  computed  using  our  timing  analysis.  Again  the  probability 
of  destruction  is  a  characteristic  of  interceptor  reliability. 

The  third  effectiveness  measure  is  again  a  combination  of 


timing  and  reliability.  Our  timing  analysis  can  be  used  to  com¬ 
pute  the  time  to  call  for  a  launch  and  then  in  a  later  duty  cycle 
to  call  for  a  cancellation.  Conversely,  the  ability  to  cancel  de¬ 
pends  upon  the  times  tint  and  tnonint  of  the  missile  battery 
and  its  reliability  value  of  cancellation. 

The  fourth  (i.e.  the  first  measure  of  performance)  was  ad¬ 
dressed  earlier.  As  shown  it  can  be  answered  using  our  timing 
analysis. 

The  fifth  (i.e.  the  second  measure  of  performance),  the 
question  as  to  if  the  battle  manager  assigned  a  interceptor  in 
time  is  purely  a  matter  of  timing  analysis  and  predictability  of 
the  threat  missile’s  path  and  other  dynamics  of  flight.  We  have 
sketched  as  to  how  this  can  be  addressed.  The  last  measure  of 
performance,  that  of  detecting  a  friend  from  a  foe  is  beyond 
the  scope  of  system  policy  analysis. 

6.  RELATED  WORK 

Michael  et  al.  [8]  developed  an  iterative  approach  for  study¬ 
ing  the  timing  constraints  of  a  prototype  ballistic  missile  de¬ 
fense  system  by  using  models  expressed  in  UML  for  Real-time 
extension  (UML-RT),  which  are  then  translated  into  coarse¬ 
grained  simulation  models  that  are  exercised  using  the  OM- 
NeT++  simulation  engine.  The  integration  of  the  UML-RT 
models  with  simulation  models  provides  a  seamless  process 
for  rapidly  constructing  executable  prototypes  for  the  purpose 
of  analyzing  timing  constraints  and  deriving  system  require¬ 
ments  from  them.  The  effectiveness  of  the  approach  was  demon¬ 
strated  for  the  sensor-netting  capability  of  a  missile  defense 
system. 

Singaraju  and  Borky  [11]  created  a  methodology  for  evalu¬ 
ating  force- structure  alternatives  against  operational  tasks.  They 
developed  a  set  of  four  measures  of  effectiveness  for  compar¬ 
ing  alternative  structures:  (i)  operational  effectless,  the  abil¬ 
ity  of  the  force  structure  to  address  current  and  projected  task¬ 
ing;  (ii)  affordability ,  the  ability  of  the  proposed  alternative 
to  fit  within  reasonable  budget  projections;  (iii)  technical  risk, 
availability  of  the  required  enabling  technologies  and  products 
to  implement  the  system  or  systems  involved  on  a  given  sched¬ 
ule;  and  integration,  the  ability  of  the  proposed  alternative  to 
maintain  continuity  of  services  to  warfighters  and  to  fit  into  an 
evolving  force  structure  in  addition  to  backward  compatibil¬ 
ity.  Specific  elements  of  operational  effectivenss  used  within 
the  methodology  include 

Response  time:  The  ability  to  meet  service  delivery  time  re¬ 
quirements  of  customers,  including  the  time  to  generate 
mission  tasking  and  the  latency  in  delivery. 

Coverage:  rate  and  continuity  of  information  collections,  de¬ 
livery  of  service,  and  other  service  to  warfighters. 

Operability/Supportability:  ability  to  deliver  services  relia- 
bily  with  acceptable  requirements  for  staffing,  useable 
equipment  and  other  infrastructure. 

Information  quality:  sensor  resolution,  communications  data 
transmission  and  error  rates,  spatio-temporal  position¬ 
ing  accuracy,  correctness  in  identifying  targets,  robust¬ 
ness  against  counter-measures,  and  similar  factors. 

Effect  delivery  quality:  ability  to  induce  desired  and  controlled 
effects  across  the  spectrum  from  denial  to  destruction 
and  against  all  targets  of  interest,  including  projectile, 
directed  energy,  materil  deliveryjamming  and  other  means. 


In  contrast  to  our  approach,  the  approach  proposed  by  Sin¬ 
garaju  and  Borky  involves  conducting  cursory  qualitative  as¬ 
sessments  of  the  effectiveness  of  alternative  force  structures 
-  force  structure  encompasses  much  more  that  just  command 
and  control. 

Simpkins,  Paulo,  and  Whitaker  [10]  developed  a  methodol¬ 
ogy  for  validating  the  outputs  from  simulation  models  such  as 
Wargame  2000;  Wargame  2000,  developed  by  the  U.S.  De¬ 
partment  of  Defense,  and  is  used  to  analyze  command  and 
control  (C2)  structures,  and  in  particular,  human  interaction 
(e.g.,  commanders  and  their  staff)  in  defending  against  ballis¬ 
tic  missile  threats.  Their  methodology  for  validating  missile- 
defense  simulation  models,  such  as  Wargame  2000,  is  to  de¬ 
fine  a  set  of  measures  of  effectiveness  or  performance  regard¬ 
ing  command  and  control  and  then  compare  the  values  for  the 
measures  of  effectiveness  or  performance  against  those  run  in 
an  independent  model:  if  the  models  differ  in  terms  of  mea¬ 
sured  values,  then  this  indicates  that  the  validity  of  the  models 
need  to  be  further  investigated. 

Combs,  Parry,  and  Towery  [4]  developed  a  methodology  for 
evaluating  the  performance  of  Commander-in-Chief  (CINC) 
staff  support  in  conducting  warfighting  tasks  (e.g.,.  planning, 
revising  plans,  monitoring  situation  awareness  information) 
in  a  computer-generated  decision  environment.  They  defined 
methods  to  measure  the  effectiveness  of  carrying  out  the  task 
from  one  level  of  the  command  hierarchy  to  another  (i.e.  from 
supported  to  supporting  units  within  the  hierarchy). 

Similarly,  Rothrock  [9]  uses  computer-based  simulation  to 
assess  the  performance  of  human  decisionmakers-either  indi¬ 
vidual  operators  or  teams  -  in  their  interaction  with  a  ballistic 
missile  defense  system.  The  abstraction  hierarchy  proposed 
by  Rothrock  is  itself  a  means  for  systematically  deriving  mea¬ 
sures  of  effectiveness  and  performance  based  on  the  command 
structure  and  other  characteristics  of  the  ballistic  missile  de¬ 
fense  system. 

White,  Young,  and  Kelsch  [14]  investigated  the  tradeoffs 
of  different  system  architectures  to  support  situational  aware¬ 
ness.  They  model  the  situational  awareness  architecture  as  a 
hierarchical  communication  systems  architecture,  along  with 
a  tactical  Internet  that  supports  dissemination  of  situational 
awareness  data.  The  tradeoff  analysis  can  be  used  to  derive 
requirements  for  the  command  structure,  or  given  a  particular 
command  structure,  determine  whether  measures  of  effective¬ 
ness  or  performance  can  be  met. 

Athans  [2]  discusses  the  need  to  have  a  uniform,  agent- 
based  distributed  hybrid  control  system  to  manage  battles  that 
involve  a  multitude  of  air,  ground,  space  and  sea  based  de¬ 
fenses.  He  describes  detailed  models  a  of  naval  battle  group 
(BG)  that  consists  of  a  carrier  accompanied  by  escorting  plat¬ 
forms  consisting  of  ships,  aircraft  and  submarines.  The  con¬ 
trol  structure  of  the  battle  group  is  hierarchical:  headed  by 
a  composite  commander  (CWC)  that  delegate  responsibilities 
to  anti-submarine  warfare  commander  (ASWC),  anti-surface 
warfare  commander  (ASUWC),  anti-air  warfare  commander 
(AAWC)  that  manage  and  respond  to  the  multitude  of  sensory 
information  received  by  the  battle  group.  He  also  describes  the 
functions  of  a  BMD  system  that  detetcts  threats,  track  targets, 
descriminates  between  decoys  and  weapons  and  manage  dam¬ 
age  assesments  provided  by  orbiting  and  ground-based  sensor 
systems.  Based  on  these  inputs,  this  multisensor  information 
must  be  fused  to  map  weapons  to  targets  and  control  engage- 


ment  functions. 

Numerous  contributions  have  been  made  in  the  area  of  agent 
systems.  The  work  we  are  most  familiar  with  is  described  in 
the  textbook  by  Subrahmanian  et  al.  [12].  The  book  presents 
a  framework  that  is  capable  of  specifying  agent  based  systems 
that  communicate  with  each  other  by  sending  messages  to  oth¬ 
ers  and  reading  messages  from  private  mailboxes  of  them¬ 
selves.  Here  agent  systems  are  specified  by  the  actions  that 
are  permitted  and  prohibited  by  specification,  where  some  pro¬ 
hibitions  may  be  removed  due  to  massages  arriving  later  in 
an  agent’s  mailbox.  The  authors  later  extend  their  work  to 
probabilistic  temporal  agents  [5].  The  type  of  software  mod¬ 
ules  which  we  need  to  develop  are  substantial  extensions  of 
the  logic  programming  paradigm  of  [5]  in  which  event  driven 
agents  are  fired  to  take  actions  (changes  of  internal  database, 
changes  in  receptivity  to  inputs,  changes  in  form  of  outputs) 
based  on  obligations,  temporal  constraints,  probabilistic  deci¬ 
sions,  etc. 

Although  this  paper  does  not  formulate  all  the  rich  seman¬ 
tics  that  BMD  agents  demand,  our  ongoing  work  is  progress¬ 
ing  towards  doing  so. 

7.  CONCLUSIONS 

Defending  against  ballistic  missiles  has  been  studied  from 
many  perspectives  because  BMD  management  and  deploy¬ 
ment  is  a  task  undertaken  by  military  forces,  it  comes  under 
their  C2  structures.  Mindful  of  this  tradition,  we  have  formu¬ 
lated  BMD  modeling  as  a  distributed  control  problem  between 
communicating  agent  system  that  follow  their  own  duty  cy¬ 
cles  eenforcing  their  individual  policies  that,  taken  together, 
contribute  to  the  end  goal  of  destroying  threat  missiles  before 
they  cause  damage.  We  do  so  by  formulating  the  doctrine  and 
policies  of  our  agents  using  EC  A  rules.  Our  agents  exchange 
information  relating  to  sensor  cues  and  weapons  status  to  two 
virtual  entities  referred  to  as  sensorNet  and  weaponsNet. 
We  show  how  to  construct  traditional  C2  structures  using  our 
agents. 

Based  on  timing  estimates  to  perform  each  task,  we  show 
how  to  specify  the  period  of  duty  cycles  of  our  agents.  Us¬ 
ing  these  estimates  and  communication  delays,  we  show  how 
to  compute  times  taken  by  a  specified  C2  structure  between  a 
cue  received  at  a  sensor  about  a  potential  threat  and  the  firing 
of  an  interceptor.  We  sketch  how  these  estimates  can  be  used  to 
compute  some  traditional  measures  of  performance  and  mea¬ 
sures  of  effectiveness. 

Our  work-in-progress  addresses  defining  MoE  and  MoP  es¬ 
timate  at  the  higher  levels  of  traditional  C2  hierarchies.  We 
are  also  formulating  our  agent  systems  as  communicating  dis¬ 
tributed  hybrid  systems  that  enforce  a  distributed  policy  base. 
We  intend  to  investigate  the  effects  of  communication  failure, 
and  the  discords  caused  by  various  attacks  and  impersonations 
on  our  distributed  agent  system.  Our  eventual  goal  is  to  show 
how  MoE  and  MoP  decorated  higher  level  policies  can  be  re¬ 
fined  to  and  enforced  by  a  low-level  communicating  agent  sys¬ 
tem. 

We  are  also  working  towards  extracting  policy-compliant 
strategies  for  BMD  C2  by  specifying  doctrines  and  policies 
as  Prolog  rules.  Then  for  a  given  attack,  a  plan  (strategy)  for 
decision  makers  to  follow  which,  when  executed,  always  pro¬ 
duces  a  successful  response  with  intercepts  within  a  prescribed 
period  from  launch  can  be  extracted  as  successful  answer  sub¬ 


stitutions  provided  by  the  Prolog  rule  engine.  Conversely,  if  a 
plan  (a  strategy  for  decision  makers)  is  given,  the  same  Prolog 
mechanism  can  be  used  to  extract  weak  points  of  it  -  namely 
attacks  for  which  the  plan  fails  to  provide  required  protection. 
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BMD  modeling  requirements 

r- . )■■■■■■■■■■■■■■■'. . juuuM... . j . . . 

<#>Must  account  for 

■  Deliberate  planning 

■  Crisis  action  planning 

#1  ndividuals  follow  a  kill  chain 

■  Map  the  individual  duties  to  agents 

#Optimize  QoS  Measures 

■  MoP:  Measure  of  Performance 

■  MoE:  Measure  of  Effectiveness 
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Modeling  choice 


#  Use  a  collection  of  agents  based  on  the  roles 
they  play  in  the  missile  defense  environment 


■  Strategic  Command  Agents 

♦  Directs  high-level  strategies  among  many  regions 


■  Regional  Command  Agents 


♦  Coordinates  regions  consisting  of  multiple  theaters 


■  Theater  Command  Agents 
♦  Directs  theater- level  actions 
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I  n  pictures 


We  lead 
from  here 
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The  operating  environment 


#SensorNet 


■  Information  gathered  (using  sensors) 
about  flying  objects  of  interests  are 
broadcasted  here 


#WeaponsNet 

■  Operational  status  about  weapons  systems 
are  broadcasted  here 
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Modeling  details 

*  Build  using  Event-Condition-Action  (ECA)  rules 
<#>  Agents  behavior  depends  on  modes  n 


■  Peacetime 

■  Pre- hostilities 

■  Hostilities 

■  Post  hostilities 

Duty  cycle 

■  Acquire  target  and  lock  oh 

■  Launch,  wait,  cancel 

Assess  TCA 
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Designing  agents  1:  SCAs 


#  Obtain  information  from 

■  SensorNet,  WeaponsNet,  AND  friends,  and 

♦  Assigns  tasks  with  timing  constraints  to 
subordinates  consisting  of 


■  Changing  modes  (peace,  war,  pre-war,  post-war) 

■  Computing  regional  objectives  of  tracking,  and 
destroying  flying  objects 

■  Altering  and/or  canceling  current  objectives 


■#  I  nforms  friends  as  necessary 
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Designing  agents  2:  RCAs 


♦  On  receiving  directives  from  superiors 

■  Get  data  from  SensorNet,  WeaponsNet  and 

♦  Assign  time-constrained  tasks  to  TCAs 
consisting  of 

■  Pass  on  changing  mode  commands  (war,  pre-war, 
post-war)  to  subordinates,  and  change  own  mode. 

■  Computing  regional  firing,  holding  (fire)  and 
canceling  fire  orders  and  assign  them  to  TCAs 

♦  Send  feedback  acknowledgements  (about  their 
ability  to  comply  with  orders)  to  superiors 
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Designing  agents  3:  TCAs 

ru,,"utjuuuuuu,| — ! j — \ 

#  On  receiving  directives  from  superiors 

■  Get  data  from  SensorNet,  WeaponsNet  and 

■  Change  mode  on  command  (war,  pre-war,  post-war) 

■  Execute  the  duty  cycle  of  acquiring/locking  on/firing/ 
assessing  damage  to  the  target 

■  On  command,  recompute  firing/reload/holdfire/cancel 
schedules  per  weapon  under  own  command 

#  Send  feedback  acknowledgements  (about  their 
ability  to  comply  with  orders)  to  superiors 

#  I  nform  sensorNet  an  weaponsNet  about  changes 
to  tracked  targets  and  weapons  status 


Wijesekera,  Michael,  Nerode 


Paper  339,  Slide  12 


Designing  agent  communities 


#Need  to  design  command,  control  and 
communication  (C3I)  structure  for 
agents  to  model  BMD  functionality 


#Use  real-life  examples 
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Command  structure  1:  Hierarchical 
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Command  structure  2:  Partially  flattened 
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#RCAs  removed 
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Command  structure  3:  Flattened 


#TCAs  work  autonomously 
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Composing  agents:  C2  structures 

r„u".. .j. | j j 

#  A  tree  consisting  of  at  most  3  levels 

#  Every  level  has  at  most  one  type  of  agents 

#  Agents  listed  in  the  SCA/ RCA/T CA  order 

<$>  Every  agent  knows  its  superiors/ subordinates 

#  Every  SCA  knows  all  of  its  friends 


#  Lemma:  A  simple  static  analysis  algorithm 
can  detect  if  any  collection  of  agents  is  a  C2 
structure 


Limitation:  Does  not  account  for  duty 
polymorphism  (i.e.  SCA's  doing  RCA's  work) 
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Analysis  objectives 

I . | . . | . | . . h" 

#  Can  the  treat  missiles  be  destroyed  before  it 
hits  or  scatters  debris  over  intended  target? 

■  Missiles  entering  airspace  need  to  be  identified  and 
categorized  as  threat,  potential  threat,  or  benign 

■  Targets  and  travel  trajectories/ times  be  computed 
and  all  fragments  tracked  and  destroyed  in  threat 
missiles 

■  Commanders  need  to  obtain  authority  to  aim  at 
missiles 

♦  This  authority  need  to  propagate  through  the  command 
chain 

♦  Takes  time  to  lock  on  and  fire 

♦  Do  follow-up  shots  destroy  the  threat  missile? 

♦  If  object  is  reclassified  as  benign,  need  to  cancel/delay 
firing 
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Preliminary  results 

r . . . . . j . . i - - - j . 

Compute  periods  for  duty  cycles  of  agents 
using 

■  Worst-case  estimates  for  command  execution  times 

■  Performance  delays  of  weapon  systems 

Compute  command  propagation  times  through 
statically-composed  C2  structures  using 

■  Worse-case  communication  delays 

■  Computed  duty  cycle  periods 

#  Using  these  estimates,  one  can  compute  if  a 
properly  identified  threat  missile  can  be 
intercepted  with  a  particular  weapon 
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Limitations 


4r 


#Need  to  account  for 


■  Hit/destroy  probabilities 

■  Reclassification  of  missile  status  and  the 
ability  to  recall/ re- target  missiles 


#Need  to  incorporate  measures 
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Measures 

r" . . . j . . 

#  Measures  of  Effectiveness,  such  as 

■  Can  launches  (or  repeat  launches)  destroy 
threat  missiles? 

■  Does  the  system  hold  fire  if  missile  status 
is  reclassified? 

#  Measures  of  Performance,  such  as 

■  How  much  above  ground  are  they 
destroyed? 

■  Delay  in  reacting  to  reclassification 
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Related  work 


#  Many  approaches 

■  Force-structure- based 

■  Strategy- based 

Some  examples: 

■  Athens:  C2  Theory,  IEEE  Trans,  on  Automatic 
Control  32,  4  (1987),  pp.  286-293 

■  Michael,  Pace,  Shin,  Tummala,  Weller,  Miklakski, 
Babbit:  Test  and  evaluation  of  BMD  systems,  NPS 
TR-CS-03-007,  2003 

■  Garwin:  A  hole  in  the  missile  shield,  Scientific 
American,  2004,  pp.  70-79 
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Summary 


#  Presented  a  preliminary  ECA  rule-based  agent 
framework  to  capture  BMD  C2  requirements 
where 

■  Strategy  and  policy  are  written  as  BMD  rules 

#  A  preliminary  formulation  of  a  well-formed 
agent  society  for  BMD  C2 

#  A  back-of-the-envelope  timing  calculation 
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Ongoing  work 

#>  Experimenting  with  a  model  that  uses 
probabilistic  temporal  reasoning 


■  (Probabilistic  Temporal  Agents  of  Kraus  et  al.) 


<#>  Using  rules  to  code  policies  and  strategies 
#  Formulating  a  framework  for  both 


■  Hierarchically  building  the  MoEs  and  MoPs 


■  Computing 

♦  Probability  of  achieving  the  numbers 

♦  Schedules  for  launches 
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